Wednesday, October 18, 2006

WM5 Activesync Problems 80072f17

Had to set up a Vodafone WM5 smartphone the other day with ActiveSync which was giving me errors due to the fact our SSL certificate was self-signed. The error I was getting initally was:

"The certificate on the server is invalid. contact you exchange server
administrator or isp to install a valid certificate on the server."

After a fair bit of Googling I found that everyone seemed to be fixing the problem by adding the Root certificate to the WM device. I attempted to add the certificate to the device by exporting the certificate from the front-end exchange servers that we used, then importing it to the WM5 smartphone, but no luck. The certificate was shown to be installed, but still ActiveSync would not work.

I was able to navigate to Outlook Web Access without problem and the page did not confront me with a security warning, so I knew I was on the right track and the certificate was installed, but no joy.

After lots of messing around I ended up deleting the certificates I'd installed from the phone (in the end i tried installing multiple ones from the CA and front-end exchange servers, rebooting and added them in again, this time trying one at a time to see if there was some problem with one of those - I tested by going to Outlook Web Access again.

After much testing I realised the problem was to do with the certificate. I'd exported one from the front-end exchange servers (as i'd read on numerous ther posts), but what I actually needed to do to get this to work was export the certificate from the CA itself. Once this was installed on its own (with other certificates installed I got the error: 80072f17), Outlook Web Access worked fine (as before), but this time ActiveSync worked without a hitch!!!

I realise now the mistake I made at the beginning - having exported the wrong certificate, but only followed other posts i'd read before had told me. Anyway, if you're having this problem, try what i did and see.

No comments: